CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

421752593pro (5.6.0), @pnpm/default-fetcher (>=0.3.0, <=0.3.2) +8 more potentially affected by CVE-2018-7651 via ssri (>=5.0.0, <=5.2.1)

ssri NPM version =5.0.0, =0.3.0, =0.3.4, =1.19.6, =1.23.2, =1.4.9, =0.7.12, =0.7.13, =2.2.2 Source cves: CVE-2018-7651 Source advisory: OSV:GHSA-325J-24F4-QV5X...

421752593pro (5.6.0), @pnpm/default-fetcher (>=0.3.0, <=0.3.2) +8 more potentially affected by CVE-2018-7651 via ssri (>=5.0.0, <=5.2.1)

ssri NPM version =5.0.0, =0.3.0, =0.3.4, =1.19.6, =1.23.2, =1.4.9, =0.7.12, =0.7.13, =2.2.2 Source cves: CVE-2018-7651 Source advisory: GHSA-325J-24F4-QV5X...

CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

CVE-2018-7651

The CVE-2018-7651 entry concerns the Node.js ssri module. Affected component: index.js in ssri prior to 5.2.2. Root cause: a regular expression denial of service (ReDoS) in strict mode triggered by a long base64 hash string. Impact: potential DoS condition; no exploitation specifics provided in t...

421752593pro (5.6.0), @ablula/lowcode-assets-jinchan (>=0.0.1, <=0.0.17) +387 more potentially affected by CVE-2018-7651 via ssri (>=2.0.0, <=5.2.1)

ssri NPM version =2.0.0, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.0-beta.0, =1.0.2, =0.1.0, =0.1.0, =4.0.0-4.0.0-alpha.3.0, =0.9.55, =1.0.0-beta.1, =2.0.1, =1.0.0-beta.0, =2.4.40 and more Source cves: CVE-2018-7651 Source advisory: MEND:CVE-2018-7651...